GDPR Information
Your rights under the General Data Protection Regulation
Introduction
The General Data Protection Regulation (GDPR) is a European Union regulation that protects the personal data and privacy of EU citizens. As a business operating in Germany, we comply with GDPR requirements.
Data Controller Information
The data controller responsible for your personal information is:
Yoga Studio Balance
Prenzlauer Allee 142
10409 Berlin, Germany
Email: [email protected]
Your Rights Under GDPR
Right to Access
You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a commonly used electronic format.
Right to Rectification
You have the right to request correction of any inaccurate personal data we hold about you. You also have the right to complete any incomplete personal data.
Right to Erasure
You have the right to request deletion of your personal data when there is no compelling reason for us to continue processing it.
Right to Restriction of Processing
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
Right to Object
You have the right to object to our processing of your personal data where we are relying on legitimate interest as the legal basis for processing.
Right to Withdraw Consent
Where we rely on consent as the legal basis for processing your data, you have the right to withdraw that consent at any time.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected] with the subject line "GDPR Request".
We will respond to your request within one month of receipt. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.
Data We Collect
We collect personal data that you voluntarily provide when you:
- Submit an inquiry or booking form
- Subscribe to our communications
- Contact us via email
This typically includes your name, email address, and any information you choose to provide in messages.
How We Use Your Data
We process your personal data for the following purposes:
- To respond to your inquiries
- To provide the services you requested
- To communicate with you about your bookings
- To comply with legal obligations
Legal Basis for Processing
We process your data based on:
- Your explicit consent
- Contractual necessity to provide services you requested
- Legitimate business interests
- Legal obligations
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Inquiry data is typically retained for up to two years from the last contact.
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
Third-Party Disclosure
We do not sell or rent your personal data to third parties. We may share data only when required by law or necessary to provide our services.
International Data Transfers
Your data is processed within the European Union and is not transferred to countries outside the EU/EEA.
Right to Lodge a Complaint
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the relevant supervisory authority.
In Germany, the federal data protection authority is:
Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Graurheindorfer Str. 153
53117 Bonn, Germany
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page.